edrobap
Re:Welcome to the Strip Mining Era of OSS Security
on Friday May 15, 2026 @09:12AM (#48148159)
I had done a fair bit of reverse-engineering-jar-files in the pre-LLM era for various reasons. The biggest problem with decompiled java files was naming. The original variable names, class names etc were not retained and the decompiler would use some alphanumeric series. That'd make reading code very hard. Curious how the current LLMs are able to address this. Maybe it's able to figure out how the class, variable etc is used and name it accordingly. (All this is assuming the original code itself was readable because there are enough bad programmers)
Re:What’s the origin of the phrase “big data doesn’t fit in excel”?
on Saturday April 17, 2021 @11:03AM (#26844718)
It amuses me how the low limit nature of Excel has affected the ecosystem around it. Apache POI, which is a popular library to operate on Excel files, has a weird 4GB limit [1] on uncompressed file size.
throw new IllegalArgumentException("Max entry size is bounded [0-4GB], but had " + maxEntrySize);
[1] https://svn.apache.org/viewvc/poi/tags/REL_5_0_0/src/ooxml/j...
Re:Yandex said it caught an employee selling access to users' inboxes
on Saturday February 13, 2021 @06:38AM (#26123005)
All 3 ways make sense. The dump and session token ways look cleaner from Yandex employees’ perspective. Although, none of the three should require a password change for the compromised user account. At no point, users password or hash of the password gets shared.
Re:Yandex said it caught an employee selling access to users' inboxes
on Friday February 12, 2021 @12:53PM (#26116414)
> Yandex officials also said they re-secured the compromised accounts and blocked what appeared to be unauthorized logins. They are now asking impacted account owners to change their passwords.
I’m curious how access was provided to these sold accounts. The password change implies the passwords were shared and that means plan text password were available to admins!?
Re:The Mutated Virus Is a Ticking Time Bomb
on Saturday January 02, 2021 @06:36AM (#25612097)
> This increased transmission could be due to chance or founder effects—meaning one variant just happened to get somewhere before the other variants and then got “lucky”; it was early, rather than more transmissible. It could be due to changed behavior among people—quarantine fatigue, less masking—leading to more rapid spread. However, given the current evidence, along with the specifics of the mutation, it’s getting harder to assume that those other explanations are more likely than the simple proposition that this is truly a more transmissible variant.
There is a chance that the hyper growth of the mutated virus is not scalable.
Re:Ask HN: Why does print (0.1 and 0.1 and 0.1 == 0.3) evaluate to Fal...
on Saturday January 02, 2021 @06:21AM (#25612029)
Explanation for this behaviour is explained here - https://docs.python.org/3/library/decimal.html
Re:TabFS: Mount your Browser Tabs as a Filesystem
on Friday January 01, 2021 @02:52AM (#25601604)
I have seen this behaviour repeatedly. Having to many “task windows” makes it difficult to focus. Similar to having to many tasks in Asana or emails in my Inbox. Prioritisation is the only option to come out of this. Unfortunately, I haven’t found a way to tag priority with the “task windows”. And that’s the reason I daily browse through all windows and close the ones that are not urgent.
Re:They want us to be compliant, not secure
on Saturday December 26, 2020 @10:53AM (#25544132)
> SOC3 facility, located 25 feet below street level in 8 foot thick concrete walls
One of objectives for encryption at rest is shredding. The drives may not remain in the secure facility after the end of life.
> your files are distributed in pieces across millions of drives throughout the data center
Distributing data could actually secure it if individual pieces are meaningless.
Re:Some Git internals
on Saturday December 26, 2020 @12:34AM (#25541655)
Branching is more of an art. With the kind of flexibility git provides, one can get lost in the convention to follow. I have found this useful For a small team working on app development -
Re:Ask HN: What helps you deal with burnout?
on Saturday December 19, 2020 @12:42AM (#25475386)
Working on your intrinsic motivation needs - relatedness, autonomy, and competence - has always helped me when it comes to burnout, failures, and, in general, feeling of things not going your way. AFAIU, you probably have a good autonomy in terms of "how" you do the tech stuff as long as it works. Embrace your autonomy and have a plan for the other two.